Elastic-apm

Latest version: v6.23.0

Safety actively analyzes 715032 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 17

6.1.2

Bug fixes

* fixed issue with empty transaction name for the root route with Django (1095)
* fixed on-the-fly initialisation of Flask apps (1099)

6.1.1

Bug fixes

* fixed a validation issue with the newly introduced instrumentation for S3, SNS and DynamoDB (1090)

6.1.0

Features

* Add global access to Client singleton object at `elasticapm.get_client()` (1043)
* Add `log_ecs_formatting` config option (1058) (1063)
* Add instrumentation for httplib2 (1031)
* Add better instrumentation for some AWS services (S3, SNS, DynamoDB) (1054)
* Added beta support for collecting metrics from prometheus_client (1083)

Bug fixes

* Fix for potential `capture_body: error` hang in Starlette/FastAPI (1038)
* Fix a rare error around processing stack frames (1012)
* Fix for Starlette/FastAPI to correctly capture request bodies as strings (1041)
* Fix transaction names for Starlette Mount routes (1037)
* Fix for elastic excepthook arguments (1050)
* Fix issue with remote configuration when resetting config values (1068)
* Use a label for the elasticapm Django app that is compatible with Django 3.2 validation (1064)
* Fix an issue with undefined routes in Starlette (1076)

6.0.0

Breaking changes

* Python 2.7 and 3.5 support has been deprecated. The Python agent now requires Python 3.6+ [1021]
* No longer collecting body for `elasticsearch-py` `update` and `delete_by_query` [1013]
* Align `sanitize_field_names` config with the
[cross-agent spec](https://github.com/elastic/apm/blob/3fa78e2a1eeea81c73c2e16e96dbf6b2e79f3c64/specs/agents/sanitization.md).
If you are using a non-default `sanitize_field_names`, surrounding each of your entries with stars (e.g.
`*secret*`) will retain the old behavior. [982]
* Remove credit card sanitization for field values. This improves performance, and the security value of this check was
dubious anyway. [982]
* Remove HTTP querystring sanitization. This improves performance, and is meant to standardize behavior across the
agents, as defined in https://github.com/elastic/apm/pull/334. [#982]
* Remove `elasticapm.tag()` (deprecated since 5.0.0) [1034]

Bug fixes

* Fix for GraphQL span spamming from scalar fields with required flag [1015]

5.10.1

Bug fixes

* Fix for custom serializers in elasticsearch-py [998]
* Fix large query truncation in psycopg2 [994]
* Fix memory metrics reporting when `memory.usage_in_bytes` is unavailable [987]
* Fix for Starlette/FastAPI integration to properly obey `enabled` config [1000]

5.10.0

Features

* Implement "sample_rate" property for transactions and spans, and propagate through tracestate (891)
* Add support for callbacks on config changes (912)
* Override `sys.excepthook` to catch all exceptions (943)
* Implement `log_level` config (supports central config) (946)
* Implement `transaction_ignore_urls` config (supports central config) (923)
* Add public API to retrieve trace parent header (956)
* Added support for cgroup memory metrics (846)

Bug fixes

* Fix to collect the whole query body in `elasticsearch-py` (940)
* Fix for GraphQL transaction naming (881)
* Ensure that query string max length is maintained after sanitization (968)
* Adapted kubernetes kubepod regex for detecting kubernetes metadata (958)
* Updated Starlette integration to use the route as transaction name if possible (957)

Page 9 of 17

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.